changes in the rbac metamodel: abstract roles introduced